This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft
File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json)
Hash identifier: daQgPg9Y5iLstslIoB1/tN0LC74lDxGyew7Ip0aZTlo=
Subject key identifier: 88:03:34:31:FD:A0:C4:F9:69:D4:57:B2:6F:5F:B1:A6:A3:DE:DC:E0
Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5
Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5
Certificate serial: 42B82301918F6FF79B552110043D78E2796A930C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft
Manifest number: 0364
Signing time: Fri 23 Jan 2026 13:50:53 +0000
Manifest this update: Fri 23 Jan 2026 13:45:53 +0000
Manifest next update: Mon 26 Jan 2026 21:28:53 +0000
Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=)
2: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=)
3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: kZ8v1+5iSLtIf/32TRDj0nrFKMwxp/ZYb/BFHbsVXSk=)
4: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl
rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 21:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b8:23:01:91:8f:6f:f7:9b:55:21:10:04:3d:78:e2:79:6a:93:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5
Validity
Not Before: Jan 23 13:45:53 2026 GMT
Not After : Jan 26 21:28:53 2026 GMT
Subject: CN=88033431FDA0C4F969D457B26F5FB1A6A3DEDCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:9c:73:a9:b5:b9:f2:36:08:44:87:6a:d8:
3a:79:3e:dc:10:f0:2b:99:8f:d8:51:c6:35:ae:27:
12:dc:e2:31:01:f7:ca:f6:98:57:10:5d:4c:21:9c:
17:c2:b3:40:d0:e2:01:47:10:a4:f1:18:37:e5:09:
ff:fe:c9:a7:c3:9f:42:d1:77:74:97:ea:77:32:06:
1f:bb:98:e8:74:6a:55:1e:3f:6a:c6:73:4e:e4:c1:
20:1a:e5:ba:3e:cc:85:a4:99:2a:50:0c:32:b5:ac:
8a:c6:67:1e:ea:cb:3c:89:34:5a:25:83:b7:86:53:
a2:ff:0b:8c:39:28:f5:f7:92:df:d7:e4:21:10:4c:
56:8d:14:d2:6e:51:7f:3d:3a:74:66:30:87:c4:76:
80:ee:72:9b:6d:1f:6e:29:2d:d4:1d:5b:7d:6c:4d:
90:9c:4a:37:74:1e:e9:bb:e0:6b:3d:fd:ab:b5:39:
f8:a0:1a:4b:92:05:ef:f6:c9:7d:aa:6c:a7:ce:10:
80:f0:17:23:3d:ee:e2:45:fd:74:e5:2d:11:66:c7:
91:c3:97:95:9c:0d:a3:4f:c4:70:57:7a:e2:1e:96:
9b:20:cc:39:b3:c1:71:bf:36:20:37:85:d9:d6:da:
bd:08:a2:54:a8:37:77:fb:45:96:a3:65:1f:c8:f8:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:03:34:31:FD:A0:C4:F9:69:D4:57:B2:6F:5F:B1:A6:A3:DE:DC:E0
X509v3 Authority Key Identifier:
keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ce:cc:a4:4e:fa:43:94:03:82:30:04:8a:fe:18:07:38:06:
b8:82:56:88:b7:ba:5f:8a:a0:6a:05:6a:c2:fa:59:bb:08:db:
64:de:d0:fc:e3:3d:a1:7b:0a:cf:32:65:f9:f3:43:a0:10:f3:
b5:8f:df:23:b1:df:40:e9:06:3e:a6:3d:90:ab:8b:79:36:8f:
94:6b:f1:34:3d:e8:02:c0:d8:55:63:2e:da:75:c6:56:3b:83:
c7:9d:2c:39:ca:c9:4d:26:18:dc:5e:9d:14:2b:58:36:cb:4d:
b1:58:2d:d5:86:01:7f:39:05:e9:b6:13:d0:29:64:d6:d1:a3:
94:48:04:1e:28:13:8f:01:7b:03:2d:84:4e:bd:59:89:89:76:
9b:f7:7a:b7:a6:84:26:5f:eb:27:d1:f9:b7:4e:84:7f:46:9c:
07:ee:cc:e8:27:1f:94:02:d1:92:61:43:bf:37:4f:83:63:ea:
66:18:87:a3:ba:d0:0d:ba:dd:99:78:92:b4:81:4e:a9:50:fe:
83:26:42:42:fe:d8:33:57:f1:fa:e4:cc:f1:07:1c:e5:1f:10:
3b:8a:e3:68:f8:5f:8b:f3:25:a3:ec:66:a5:31:0f:30:e9:bb:
15:66:10:9f:80:78:d2:c9:7e:d2:4f:a3:91:e8:43:42:e0:b2:
40:c8:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:52 2026 by rpki-client